CVE-2024-31867
published 2024-04-09CVE-2024-31867: Improper Input Validation vulnerability in Apache Zeppelin. The attackers can execute malicious queries by setting improper configuration properties to LDAP…
PriorityP338medium6.5CVSS 3.1
AVNACLPRNUINSUCLILAN
EPSS
1.78%
75.9th percentile
Improper Input Validation vulnerability in Apache Zeppelin.
The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter.
This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.
Users are recommended to upgrade to version 0.11.1, which fixes the issue.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apache | zeppelin | >= 0.8.2 < 0.11.1 | 0.11.1 |
| apache_software_foundation | apache_zeppelin | >= 0.8.2 < 0.11.1 | 0.11.1 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Apache Zeppelin: LDAP search filter query Injection Vulnerability
ghsa·2024-04-09
CVE-2024-31867 [MEDIUM] CWE-20 Apache Zeppelin: LDAP search filter query Injection Vulnerability
Apache Zeppelin: LDAP search filter query Injection Vulnerability
Improper Input Validation vulnerability in Apache Zeppelin.
The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter.
This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.
Users are recommended to upgrade to version 0.11.1, which fixes the issue.
OSV
Apache Zeppelin: LDAP search filter query Injection Vulnerability
osv·2024-04-09
CVE-2024-31867 [MEDIUM] Apache Zeppelin: LDAP search filter query Injection Vulnerability
Apache Zeppelin: LDAP search filter query Injection Vulnerability
Improper Input Validation vulnerability in Apache Zeppelin.
The attackers can execute malicious queries by setting improper configuration properties to LDAP search filter.
This issue affects Apache Zeppelin: from 0.8.2 before 0.11.1.
Users are recommended to upgrade to version 0.11.1, which fixes the issue.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://www.openwall.com/lists/oss-security/2024/04/09/12https://github.com/apache/zeppelin/pull/4714https://lists.apache.org/thread/s4scw8bxdhrjs0kg0lhb68xqd8y9lrtfhttp://www.openwall.com/lists/oss-security/2024/04/09/12https://github.com/apache/zeppelin/pull/4714https://lists.apache.org/thread/s4scw8bxdhrjs0kg0lhb68xqd8y9lrtf
2024-04-09
Published